Salt Security

Salt Security is an API security company founded in 2016 and headquartered in Palo Alto, California, US. It was built to close the gap left by traditional web application firewalls and API gateways, which cannot detect the business-logic abuse and reconnaissance behavior typical of modern API attacks.

Its Agentic Security Platform builds a graph of every API, AI agent, and MCP server across an organization’s environment, then applies behavioral analytics to flag misconfigurations and active attacks in real time. Enterprise customers in banking, retail, and healthcare, including Scotiabank and Hyundai, use the platform to protect production APIs and the AI agents built on top of them.

1. API Discovery: Continuously maps every API, parameter, and data flow across cloud and on-premises environments.

2. Behavioral Detection: Analyzes traffic patterns over time to identify reconnaissance and abuse missed by static rules.

3. Posture Governance: Flags misconfigured or unauthenticated API endpoints before they reach production.

4. AI Agent & MCP Security: Extends discovery and protection to AI agents and Model Context Protocol servers.

5. Shift-Left Testing: Feeds vulnerability findings back into CI/CD pipelines for earlier remediation.

6. SOC Integration: Sends enriched alerts to existing SIEM and SOAR tools for incident response.